Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/QuzcYVHAZUkNehYpHHQT3YnhlzQ.roa
File: QuzcYVHAZUkNehYpHHQT3YnhlzQ.roa (raw, json)
Hash identifier: hVi+mnT6kxWAzX+++9AxwWTfXw2xx10RZeft1QT1RRE=
Subject key identifier: 42:EC:DC:61:51:C0:65:49:0D:7A:16:29:1C:74:13:DD:89:E1:97:34
Certificate issuer: /CN=184fff3cf900e76aae0d2cd2e77dfeae24c5d24c
Certificate serial: 019275FD5E6994FA13FDB6F4D21013F256BD
Authority key identifier: 18:4F:FF:3C:F9:00:E7:6A:AE:0D:2C:D2:E7:7D:FE:AE:24:C5:D2:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GE__PPkA52quDSzS533-riTF0kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/QuzcYVHAZUkNehYpHHQT3YnhlzQ.roa
Signing time: Thu 10 Oct 2024 10:33:11 +0000
ROA not before: Thu 10 Oct 2024 10:33:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198312
IP address blocks: 37.0.96.0/24 maxlen: 24
37.0.97.0/24 maxlen: 24
37.0.98.0/24 maxlen: 24
37.0.100.0/24 maxlen: 24
37.0.102.0/24 maxlen: 24
37.0.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:75:fd:5e:69:94:fa:13:fd:b6:f4:d2:10:13:f2:56:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=184fff3cf900e76aae0d2cd2e77dfeae24c5d24c
Validity
Not Before: Oct 10 10:33:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=42ecdc6151c065490d7a16291c7413dd89e19734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bf:7d:1b:0f:af:da:46:c5:43:27:6f:d2:3a:
50:f6:3c:6c:95:69:bd:38:14:20:dc:f7:f5:7b:6d:
d1:01:ec:b6:4a:16:33:9e:4f:e8:c3:75:16:d8:3f:
73:b7:f8:b1:3e:bd:83:44:a4:21:c3:7e:d2:c4:c5:
b9:c6:b1:c5:cb:93:9e:56:f3:b6:3b:47:9c:39:22:
ca:6b:47:15:b2:71:c2:83:95:e4:3a:3e:f7:e5:55:
85:5f:85:b3:a5:8b:a1:d4:2a:14:a5:dc:6e:37:53:
5f:85:a4:ba:43:e1:90:a2:27:5b:fb:0d:dd:de:8e:
ef:05:8d:35:fe:f6:4c:cd:5c:09:09:8f:77:fe:99:
37:cd:ac:2c:3e:18:e3:6e:3e:71:d0:8d:18:72:d1:
e4:8c:74:84:fa:12:fc:d8:b5:5d:b6:97:98:25:9a:
d2:10:a8:a9:03:52:09:ea:e4:94:e1:74:ad:eb:92:
27:54:e2:21:28:2f:9c:0e:e3:79:13:e8:17:c1:5b:
a2:5d:a8:d6:57:fa:fa:30:83:65:e2:73:8f:34:7e:
e4:5d:36:26:1d:1e:29:64:41:f7:97:40:59:a4:fc:
2d:1f:a7:c1:6d:e0:77:b2:6f:17:dc:24:8d:a4:16:
85:49:64:6f:68:85:c1:bc:f7:c8:b5:4a:ca:38:66:
8f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:EC:DC:61:51:C0:65:49:0D:7A:16:29:1C:74:13:DD:89:E1:97:34
X509v3 Authority Key Identifier:
keyid:18:4F:FF:3C:F9:00:E7:6A:AE:0D:2C:D2:E7:7D:FE:AE:24:C5:D2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GE__PPkA52quDSzS533-riTF0kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/QuzcYVHAZUkNehYpHHQT3YnhlzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.0.96.0-37.0.98.255
37.0.100.0/24
37.0.102.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:f4:d8:01:79:ea:5b:c5:01:21:71:31:dc:cf:f4:96:29:e6:
40:cc:f2:66:56:2e:22:38:f5:8c:00:04:da:e1:74:3b:c1:9a:
f5:c9:94:91:a8:2d:ba:1b:3c:b6:02:33:41:2e:28:3f:dd:a0:
3e:13:13:df:02:42:b7:bb:55:88:76:ed:68:d8:3f:5e:5e:0d:
bc:ed:4a:b9:f6:16:fc:37:09:ad:e8:de:f2:33:2b:9d:58:cd:
07:4c:3e:72:9c:87:97:5a:e8:8b:b7:99:90:cc:a1:34:f5:25:
d9:74:af:5a:35:78:11:5b:87:6f:66:69:92:38:a7:b7:e1:49:
bf:fc:ea:65:50:68:da:d4:cd:81:09:c1:f7:29:6c:7a:5c:39:
65:fa:bd:3c:63:7b:57:30:42:1e:69:41:ec:d0:43:07:0d:ce:
74:44:c2:0f:27:8c:5b:f5:58:84:58:9e:92:0b:b3:b1:ec:4b:
c8:c2:0e:0a:b8:21:cf:95:b0:c2:4e:04:2a:c6:9c:5b:29:8f:
a2:73:aa:f8:eb:02:74:ea:51:a4:bc:d3:bf:07:d6:bf:2b:98:
e9:f9:f0:76:44:c0:1c:3c:6b:ee:38:ec:94:57:d5:f3:4a:3b:
c4:e1:21:1a:70:e3:be:96:a7:69:fb:37:2a:73:a8:27:4c:d9:
ae:6a:de:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 02:22:32 2024 by rpki-client on console.sobornost.net